Jump to content

A util to scan windows for viruses from linux???

  Good free one would be great any advice???

MSI Performance Gaming AMD Ryzen 1st and 2nd Gen AM4 M.2 USB 3 DDR4 HDMI Display Port Mini-ITX Motherboard (B450I Gaming Plus AC), AMD Ryzen 7 2700 4.1 GHz, TEAMGROUP T-Force Vulcan Z DDR4 16GB (2 x 8GB) 3200MHz (PC4 25600) Ram, EVGA GeForce RTX 3060 Ti XC Gaming, 08G-P5-3663-KL, 8GB GDDR6, Metal Backplate, LHR
Link to comment
Share on other sites

Link to post
Share on other sites

Could you be a bit more specific with "viruses from linux". AFAIK if you get a virus on one OS it won't migrate to the other (correct me if I'm wrong).

Link to comment
Share on other sites

Link to post
Share on other sites

3 minutes ago, monjessenstein said:

Could you be a bit more specific with "viruses from linux". AFAIK if you get a virus on one OS it won't migrate to the other (correct me if I'm wrong).

I want a av util that will scan windows, but for linux..

MSI Performance Gaming AMD Ryzen 1st and 2nd Gen AM4 M.2 USB 3 DDR4 HDMI Display Port Mini-ITX Motherboard (B450I Gaming Plus AC), AMD Ryzen 7 2700 4.1 GHz, TEAMGROUP T-Force Vulcan Z DDR4 16GB (2 x 8GB) 3200MHz (PC4 25600) Ram, EVGA GeForce RTX 3060 Ti XC Gaming, 08G-P5-3663-KL, 8GB GDDR6, Metal Backplate, LHR
Link to comment
Share on other sites

Link to post
Share on other sites

Do you mean like having a windows slave drive plugged into a Linux machine and scanning it? I've not heard of any anti-virus software designed to be installed on one OS but to scan another. Also there's the issues of (correct me if this has changed of recent) but Linux not fully supporting NTFS. I've been told you can read from NTFS but cannot write to it which would make virus scanning one kind of useless.

Link to comment
Share on other sites

Link to post
Share on other sites

Just now, Windows7ge said:

Do you mean like having a windows slave drive plugged into a Linux machine and scanning it? I've not heard of any anti-virus software designed to be installed on one OS but to scan another. Also there's the issues of (correct me if this has changed of recent) but Linux not fully supporting NTFS. I've been told you can read from NTFS but cannot write to it which would make virus scanning one kind of useless.

Crap great point...

MSI Performance Gaming AMD Ryzen 1st and 2nd Gen AM4 M.2 USB 3 DDR4 HDMI Display Port Mini-ITX Motherboard (B450I Gaming Plus AC), AMD Ryzen 7 2700 4.1 GHz, TEAMGROUP T-Force Vulcan Z DDR4 16GB (2 x 8GB) 3200MHz (PC4 25600) Ram, EVGA GeForce RTX 3060 Ti XC Gaming, 08G-P5-3663-KL, 8GB GDDR6, Metal Backplate, LHR
Link to comment
Share on other sites

Link to post
Share on other sites

7 minutes ago, Edward78 said:

Crap great point...

There may be exceptions to this, I'm no Linux guru.

Link to comment
Share on other sites

Link to post
Share on other sites

12 minutes ago, Windows7ge said:

Do you mean like having a windows slave drive plugged into a Linux machine and scanning it? I've not heard of any anti-virus software designed to be installed on one OS but to scan another. Also there's the issues of (correct me if this has changed of recent) but Linux not fully supporting NTFS. I've been told you can read from NTFS but cannot write to it which would make virus scanning one kind of useless.

You're wrong. Linux has full NTFS read & write support. You are half right though in that it comes set to read only mode, R/W support must be enabled by the user.

 

32 minutes ago, Edward78 said:

  Good free one would be great any advice???

Many AVs offer bootable discs that let you scan a drive outside of the OS but I don't know of any free ones. Things that specialised are always going to be paid.

 

You tried Hirens Boot CD?

Main Rig:-

Ryzen 7 3800X | Asus ROG Strix X570-F Gaming | 16GB Team Group Dark Pro 3600Mhz | Corsair MP600 1TB PCIe Gen 4 | Sapphire 5700 XT Pulse | Corsair H115i Platinum | WD Black 1TB | WD Green 4TB | EVGA SuperNOVA G3 650W | Asus TUF GT501 | Samsung C27HG70 1440p 144hz HDR FreeSync 2 | Ubuntu 20.04.2 LTS |

 

Server:-

Intel NUC running Server 2019 + Synology DSM218+ with 2 x 4TB Toshiba NAS Ready HDDs (RAID0)

Link to comment
Share on other sites

Link to post
Share on other sites

14 minutes ago, Master Disaster said:

You're wrong. Linux has full NTFS read & write support. You are half right though in that it comes set to read only mode, R/W support must be enabled by the user.

I knew I had to be wrong somewhere but that's interesting news to note. Glad I found out.

Link to comment
Share on other sites

Link to post
Share on other sites

14 hours ago, Edward78 said:

I want a av util that will scan windows, but for linux..

I don't honestly know if something like that just exist for Linux, there actually are bootable anti virus scan utilities, you can try them

 

13 hours ago, Master Disaster said:

You're wrong. Linux has full NTFS read & write support. You are half right though in that it comes set to read only mode, R/W support must be enabled by the user.

 

Many AVs offer bootable discs that let you scan a drive outside of the OS but I don't know of any free ones. Things that specialised are always going to be paid.

 

You tried Hirens Boot CD?

Yea Linux has full NTFS support, it just sucks at removing hiberfiles when there is a dual boot system, most Linux desktops are also just using userspace file system access like gvfs and ntfs is automatically enabled with r/w support

Link to comment
Share on other sites

Link to post
Share on other sites

Yes, clamav will do the trick and is probably what the OP needs. I'm not aware of any alternatives (probably because clamav does it's job good enough, is free and open source - and in such a case, it makes little sense to divide development efforts into separate projects).

 

About viruses in general: There have been little viruses for Linux. The most probable reason is that Linux (or OS X) is a less popular OS. It makes sense for virus writers to target popular OSes of the time (such as DOS and Windows). Also, Linux is/has been protected by more computer-literate users, who are less likely to fall into "stupid mistakes", say dialog boxes on web sites etc.; and are more likely to be able to spot viruses and be prepared for them. Also, Linux as an OS (at least pre-Windows XP) was much better protected against virus infections (although, it can not be stressed enough: it was never immune. The protection comes only from more clearer the separation of Kernel | user-space | permission system of the OS FS). But: the protection from rarity and more-computer-literate user space might diminish, as a OS becomes more popular (and possibly the average user is not that computer literate as before).

 

Usually (at least historically) Viruses have not (usually!) migrated from an OS to another. But this is not a "safe" assumption; it has been like this only because it has been convenient from the viruses point of view (or their developers). It is certainly possible to write a OS-agnostic virus (even across architectures, I'd assume it is more easier though if the CPU architecture is the same - which used to protect OS X users). There more and more common factors between OSes, such as web browsers, and common scripted languages (Javascript and the like) which might run OS-agnostic viruses. Also there are file formats, which are borderline (or actual) programming languages in their own right, and could (at least in theory) contain a virus. One good example is MS Word macro viruses, and these are OS agnostic at least to a certain degree.

 

Also, it is possible a Windows virus will run in Wine (in OS X or a Linux desktop environment). It will still see a Windows machine, but it doesn't mean it can not corrupt the users files (depends on how Wine is/was configured, but 99% of the time it has full R/W support to the users home dir who is running Wine).

 

There's one important point, though: just because a Virus could not run on your OS, doesn't mean it is desirable to share viruses from files you got elsewhere for your peers (who might run another OS). That's why it is a bit naïve to claim there are no scanners targeting viruses made for another OS than on which they are running. There is a clear need, and there have (pratically) always been virus scanners for "other" OSes, especially on non-Desktop-only oriented OSes (clamav runs on many OSes, btw).

Link to comment
Share on other sites

Link to post
Share on other sites

Theres both liveCD's and utilities if you have an existing install.  I'd just say get a ubuntu liveCD and install Clam and scan from the liveCD.  Its way far ahead of any of the consumer virus scanners.

Link to comment
Share on other sites

Link to post
Share on other sites

there are several AV tools on Linux that will scan a Windows partition for viruses.

 

As previously mentioned: ClamAV Also available on Windows and MacOS.

Other options:

 

  • Sophos Antivirus for Linux - Detects, Blocks and removes Windows, Mac and Android malware. Works with Web Servers, NFS servers, FTP servers or desktop Linux. Really any Linux works just fine. Current supported platforms include: Amazon Linux, CentOS, Debian, Mint, Oracle, Red Hat, SUSE, TurboLinux and Ubuntu.
  • ckrootki / rkhunter
  • Lynis
  • ISPProtect
  • Kaspersky Anti-Virus for Linux/Endpoint Security for Linux
  • Avast Security Suite for Linux
  • ESET File Security for Linux / FreeBSD
  • Bitdefender for Linux

 

 

Link to comment
Share on other sites

Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×